Role privileges in Apple School Manager

Each role consists of a set of privileges. If you add or remove a privilege, all accounts within that role are affected. Student roles have very limited privileges, instructor and manager roles have more and administrators have the most.

Basic privileges

Privilege

Administrator

Site Manager

People Manager

Device Manager

Content Manager

Manager

Accept terms and conditions

Always on

Always off

Always off

Always off

Always off

Always off

Edit privileges for other roles

Always on

Always on

Always on

Always off

Always off

Always off

Add Apple customer numbers and Reseller IDs

Always on

Always off

Always off

Always off

Always off

Always off

Set tax status information

Always on

Always off

Always off

Always off

Always off

Always off

Use managed devices

Always on

Always on

Always on

Always on

Always on

Always on

Sign in to iCloud.com with a Managed Apple ID

Always on

Always on

Always on

Always on

Always on

Always on

Use managed apps and books

Always on

Always on

Always on

Always on

Always on

Always on

Configure institution settings, as shown in the following table:

Privilege

Administrator

Site Manager

People Manager

Device Manager

Content Manager

Manager

Configure SIS information

Always on

Always on

Always on

Always off

Always off

Always off

Configure federated authentication

Always on

Always on

Always on

Always off

Always off

Always off

Create, edit, and delete locations

Always on

Always on

Always on

Always off

Always off

Always off

Set the default Managed Apple ID user name format

Always on

Always on

Always on

Always off

Always off

Always off

Set the default password policy for new students

Always on

Always on

Always on

Always off

Always off

Always off

People privileges

Manage people privileges, as shown in the following table:

Privilege

Administrator

Site Manager

People Manager

Device Manager

Content Manager

Manager

Create, edit and delete Managed Apple IDs

Always on

On by default

On by default

Always off

Always off

On by default

Assign roles to users

Always on

On by default

On by default

Always off

Always off

On by default

Change students’ password policies

Always on

On by default

On by default

Always off

Always off

On by default

Change account status of users

Always on

On by default

On by default

Always off

Always off

On by default

Inspect user accounts

Always on

On by default

On by default

Always off

Always off

On by default

View account inspection log

Always on

On by default

On by default

Always off

Always off

On by default

Create, edit and delete classes

Always on

On by default

On by default

Always off

Always off

On by default

Reset passwords

Always on

On by default

On by default

Always off

Always off

On by default

Generate verification codes

Always on

On by default

On by default

Always off

Always off

On by default

Content privileges

Configure content settings, as shown in the following table:

Privilege

Administrator

Site Manager

People Manager

Device Manager

Content Manager

Manager

Buy content

Always on

On by default

Always off

Always off

Always on

Off by default

View content

Always on

On by default

Always off

Always off

Always on

On by default

Reassign licences for apps and hold unassigned licences for apps

Always on

On by default

Always off

Always off

Always on

On by default

Contribute to institution’s iTunes U public website

Always on

On by default

Always off

Always off

Always off

On by default

Request, connect or publish to institution’s iTunes U public site manager

Always on

On by default

Always off

Always off

Always off

Always off

Note: You can migrate a Volume Purchase Programme (VPP)-only account into Apple School Manager.

Device privileges

Manage device settings, as shown in the following table:

Privilege

Administrator

Site Manager

People Manager

Device Manager

Content Manager

Manager

Manage MDM servers

Always on

Always on

Always off

Always on

Always off

Always off

Add, assign and remove devices

Always on

Always on

Always off

Always on

Always off

Always off

Instructor privileges

Configure instructor settings, as shown in the following table:

Privilege

Instructor

Reset passwords for students and generate verification codes for students